Vulnerabilities

search
ID
Packages
Summary
Published
arrow_upward
Attributes
PYSEC-2026-2619
  • PyPI/marimo
 marimo contains a reflected cross-site scripting vulnerability in the notebook page 13 Jul
  • Fix available
  • Severity - 5.1 (Medium)
PYSEC-2026-407
  • PyPI/marimo
 Marimo: Pre-Auth Remote Code Execution via Terminal WebSocket Authentication Bypass 29 Jun
  • Fix available
  • Severity - 9.3 (Critical)
GHSA-8m59-7xv8-735h
  • PyPI/marimo
 marimo contains a reflected cross-site scripting vulnerability in the notebook page 18 Jun
  • Fix available
  • Severity - 5.1 (Medium)
GHSA-2679-6mx9-h9xc
  • PyPI/marimo
 Marimo: Pre-Auth Remote Code Execution via Terminal WebSocket Authentication Bypass 08 Apr
  • Fix available
  • Severity - 9.3 (Critical)
GHSA-xjv7-6w92-42r7
  • PyPI/marimo
 marimo vulnerable to proxy abuse of /mpl/{port}/ 01 Oct 2025
  • Fix available
  • Severity - 6.9 (Medium)